CSCup94684 - LSC phone certificates does not contain AIA and CDP attributes

[Nadav]

Hi everyone,

Can anyone confirm (preferably with documentation) that the lack of the AIA and CDP attributes in LSC's makes them inadequate for Microsoft NPS EAP-TLS authentication? This is assuming the CUCM cluster is in Mixed Mode, and CAPF is self-signed.

[FrozenPea]

I think the lack of the SubjectAlternativeName attribute might be the actual problem. 

[Nadav]

Hi,

I am looking for documentation of this caveat, preferably from either Cisco or Microsoft.

[vincent.morton]

Did you ever manage to find documentaiton on this beyond that bug notice? We have a customer who appears to be having the same issue and it would be good to have something to refer them to.